Enable SSL Authentication in Apache Kafka using Portecle

Back Next

Enable SSL Authentication on a Kafka Node

After you import the certificates to the truststore file, enable the SSL authentication on a Kafka node.

Copy the keystore and truststore files to the same machine.

Open the

Server.properties

file from the

<Kafka_Home/config/>

path.

Edit the following properties:

Properties	Values
Listeners	SSL://<Fully qualified domain name of Kafka Server>:<port> For example, SSL://kafkacluster1.informatica.com:9094
Advertised Listeners	SSL://<Fully qualified domain name of Kafka Server>:<port> For example, SSL://kafkacluster1.informatica.com:9094
Security.interbroker.protocol	SSL
ssl.client.auth	Required. This property ensures that the SSL client is always authenticated and does not allow any plaintext connections to Kafka.
ssl.key.password	Key password. This is the same password that is prompted before saving the keystore file.
ssl.keystore.location	Keystore location.
ssl.keystore.password	Keystore password.
ssl.truststore.location	Truststore location.
ssl.truststore.password	Truststore password.
ssl.enabled.protocols	TLSv1.2 or any other protocols
ssl.endpoint.identification.algorithm	HTTPS Set the correct fully qualified domain name (FQDN) in the common name and subject alternative name of the certificate. The identification algorithm works correctly only if FQDN is correct in common name and subject alternative name of the certificate. If the FQDN is wrong or any other information is missing, you cannot connect to the Kafka endpoint. In such a case, setting it blank or null resolves your issue. You must be aware that you can be prone to endpoint spoofing attacks.